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METHOD AND APPARATUS FOR SELECTIVE 
DATA CONTROL 



BACKGROUND OF THE INVENTION 

[0001] This invention relates generally to selective data 
communication, and more particularly, to methods and apparatus for selectively 
controlling data flow between a proprietary stream and a subscriber. 

[0002] Gas turbine engines typically include a compressor section, a 
combustor section, and at least one turbine section. The compressor compresses air, 
which is mixed with fuel and channeled to the combustor. The mixture is then ignited 
thereby generating hot combustion gases. The combustion gases are channeled to the 
turbine which extracts energy from the combustion gases for powering the 
compressor, as well as producing useful work to power a load, such as an electrical 
generator, or to propel an aircraft in flight. 

[0003] At least some known gas turbine engines are operated with 
advanced control systems that include proprietary data streams that transmit and 
receive data amongst various instruments and modules that make up the control 
system. Furthermore, to facilitate remote monitoring of the engines, proprietary data 
may be transmitted to a location that is remote fi-om the facility including the engine 
and control system. Protecting such data from unauthorized reception facilitates 
preserving its proprietary value. Accordingly, within at least some known 
transmission systems, data is transmitted via dedicated communication lines from the 
data source to an end user. Other known systems encrypt or otherwise obfiiscate the 
data prior to transmitting it, such that a decryption key is needed to view the 
transmitted data. However, in some cases it may be desirable to permit access to 
predetermined entities such as, customers and/or preauthorized maintenance service 
providers without requiring those entities to have a dedicated line for access to 
encrypted data. 
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BRIEF DESCRIPTION OF THE INVENTION 

[0004] In one aspect, a method of selectively controlling 
communication between a supervisory processor and a subscriber is provided. The 
method includes receiving a stream of data at the supervisory processor, controlling 
transmission of the stream of data from the supervisory processor to the subscriber 
based on an associated supervisory processor configuration, receiving an enabling 
configuration at the supervisory processor which alters the supervisory processor 
configuration, and transmitting at least a portion of the controlled stream of data from 
the supervisory processor to the subscriber based on the supervisory processor 
configuration. 

[0005] In another aspect, a data network is provided. The network 
includes a first proprietary network segment configured to receive proprietary data 
communication from a proprietary data source, a supervisory processor 
communicatively coupled to the first proprietary network wherein the processor is 
configured to execute software instructions based on a processor configuration, and a 
subscriber network segment coupled to the supervisory processor wherein the 
segment is configured to selectively fransmit subscriber data from the supervisory 
processor to a subscriber. 

[0006] In yet another aspect, a gas turbine control monitoring system 
for selectively fransmitting gas turbine engine operational data from an engine 
supervisory processor to a subscriber is provided. The system includes a gas turbine 
control system communicatively coupled to at least one engine sensor, a first 
proprietary data network communicatively coupled to the gas turbine control system, 
a supervisory processor communicatively coupled to the first proprietary network for 
receiving gas turbine engine operational data, a second proprietary data network 
communicatively coupled to the supervisory processor, and a subscriber data network 
communicatively coupled to the supervisory processor, the processor is configured to 
selectively transmit gas turbine engine operational data to the subscriber through the 
subscriber data network. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0007] Figure 1 is a side cutaway view of a gas turbine system that 
includes a gas turbine; 

[0008] Figure 2 is a schematic illustration the gas turbine system 
shown in Figure 1 ; 

[0009] Figure 3 is a schematic illustration of an exemplary 
architecture of a network 300 that may be used with the gas turbine system shown in 
Figure 1. 

[0010] Figure 4 is a schematic illustration of an alternate architecture 
of a network 400 that may be used with the gas turbine system shown in Figure 1 . 

[001 1 ] Figure 5 is a block diagram of an exemplary method that may 
be used to control data access to the network shown in Figure 3 and the network 
shown in Figure 4. 

DETAILED DESCRIPTION OF THE INVENTION 

[0012] While the methods and apparatus are herein described in the 
context of gas turbine engine control systems used in an industrial environment, it is 
contemplated that the herein described method and apparatus may find utility in other 
data network applications including, but not limited to, commercial applications. The 
description hereinbelow is therefore set forth only by way of illustration rather than 
limitation. 

[0013] Figure 1 is a side cutaway view of a gas turbine system 10 
that includes a gas turbine 20. Gas turbine 20 includes a compressor section 22, a 
combustor section 24 including a plurality of combustors 26, and a turbine section 28 
coupled to compressor section 22 using a shaft (not shown). 

[0014] In operation, ambient air is channeled into compressor section 
22 where the ambient air is compressed to a pressure greater than the ambient air. 
The compressed air is then channeled into combustor section 24 where the 
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compressed air and a fuel are combined to produce a relatively high-pressure, high- 
velocity gas. Turbine section 28 is configured to extract and the energy from the 
high-pressure, high-velocity gas flowing from combustor section 24. The combusted 
fuel mixture produces a desired form of energy, such as, for example, electrical, heat 
and mechanical energy, hi one embodiment, the combusted fuel mixture produces 
electrical energy measured in kilowatt-hours (kWh). However, the present invention 
is not limited to the production of electrical energy and encompasses other forms of 
energy, such as, mechanical work and heat. Gas turbine system 10 is typically 
controlled, via various control parameters, from an automated and/or electronic 
control system (not shown) that is attached to gas turbine system 10. 

[0015] Figure 2 is a simphfied schematic illustration of gas turbine 
system 10 shown in Figure 1. Gas turbine system 10 also includes a plurality of 
sensors 30 electrically coupled to gas turbine 20. A combustion dynamics monitor 
(CDM) 32 samples analog data from sensors 30 and converts the analog data to digital 
signals for subsequent processing. A computer 34 receives the sampled and digitized 
sensor data from at least one of CDM 32 and an On-Site Monitor (OSM) 35, and 
performs high-speed data analysis. OSM 35 may also include a PI/UDP turbine 
control system data server that executes on OSM 35 to transmit control system data to 
through a network. Although only four combustors 26 are shown, it should be 
realized that gas turbine engine 20 can include more or less than four combustors 26, 
for example, in one exemplary embodiment, gas turbine engine 20 includes twenty- 
seven combustors 26. 

[0016] Computer 34 receives commands from an operator via an 
operator interface 36. An associated monitor 38 such as, but not limited to, a liquid 
crystal display (LCD) and a cathode ray tube, allows the operator to observe data 
received from computer 34. The operator suppUed commands and parameters are 
used by computer 34 to provide control signals and information to CDM 32 and OSM 
35. 

[0017] In one embodiment, computer 34 includes a device 40, for 
example, a floppy disk drive, CD-ROM drive, DVD drive, magnetic optical disk 



141841 



(MOD) device, or any other digital device including a network connecting device 
such as an Ethernet device for reading instructions and/or data from a computer- 
readable medium 42, such as a floppy disk, a CD-ROM, a DVD or an other digital 
source such as a network or the hitemet, as well as yet to be developed digital means. 
In another embodiment, computer 34 executes instructions stored in firmware (not 
shown). Computer 34 is programmed to perform functions described herein, and as 
used herein, the term computer is not limited to just those integrated circuits generally 
known as computers, but broadly refers to computers, processors, microcontrollers, 
microcomputers, programmable logic controllers, application specific integrated 
circuits, and other programmable circuits, and these terms are used interchangeably 
herein. 

[0018] Figure 3 is a schematic illustration of an exemplary 
architecture of a network 300 that may be used with gas turbine system 10 shown in 
Figure 1. In the exemplary embodiment, network 300 includes a first proprietary 
network segment 302, a supervisory processor 304 communicatively coupled to first 
proprietary network 302, and a subscriber network segment 306 coupled to 
supervisory processor 304. In an altemative embodiment, network 300 also includes 
a second proprietary data network segment 308 that is communicatively coupled to 
supervisory processor 304. As used herein, "proprietary network" is used to describe 
a limited access network that is owned and operated by a single business entity or by a 
limited number of cooperative business entities. "Proprietary data" is used to describe 
data that is owned by a business entity that may take measures to prevent 
unauthorized access to such data. Such measures may include, but are not limited to, 
transmitting the proprietary data on a proprietary network and/or obfuscating the data 
before transmitting the data over a network. The business entity may also transmit 
unobfuscted proprietary data over a commercial network. 

[0019] First proprietary network segment 302 may be configured to 
receive proprietary data communication from a proprietary data source, such as, but 
not limited to, computer 34. In the exemplary embodiment, proprietary network 
segment 302 is an Ethernet segment with limited access controlled by the proprietary 
network owner. In one embodiment, data transmitted through segment 302 is not 
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obfuscated and may rely upon limited-access of the network for data confidentiality. 
In another embodiment, data transmitted through segment 302 is obfuscated at the 
data source, such as computer 34, such that an unauthorized user intercepting the data 
communication would have difficulty extracting intelligible data from segment 302. 

[0020] Supervisory processor 304 is communicatively coupled to the 
first proprietary network and is configured to execute software instructions based on a 
processor configuration 310. Configuration 310 may be embodied as a computer file 
that may reside in a memory 312 of processor 304. Memory 312 may, for example, 
be volatile, such as, a random access memory (RAM). In alternative embodiments, 
other forms of memory may be used, including but not Umited, to flash memory 
(FLASH), programmable read only memory (PROM), and electronically erasable 
programmable read only memory (EEPROM). Configuration 310 may also be 
embodied as a processor register or other memory location of processor 304. 

[0021] Subscriber network segment 306 may be coupled to the 
supervisory processor through a processor or communications card port 314, and 
segment 306 is configured to transmit subscriber data from supervisory processor 304 
to a subscriber processor 316. In one embodiment, subscriber processor 316 includes 
a client application that is programmed to receive obfuscated data from supervisory 
processor 304 and deobfiiscate the data for presentation to the subscriber in a 
predetermined format. Receipt and deobfuscation of the data may also be selectively 
controlled by the subscriber. 

[0022] In the exemplary embodiment, second proprietary data 
network segment 308 is a proprietary WAN, such as, a network with limited access 
points that is owned and operated by a single business entity or by a limited number 
of cooperative business entities. 

[0023] In operation, processor 304 receives proprietary data from a 
data source such as computer 34, and transmits the data to segment 308. Processor 
304 also determines from configuration 310 whether to fransmit the data to subscriber 
segment 306. Processor may transmit the data to segment 306 by enabling port 314 to 
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a transmit state, by deobfuscating the data at port 314 if the data is obfuscated, and/or 
by routing the data to port 314. The transmission of data is selective to allow control 
of the data by the data owner to a subscriber of the data. In the exemplary 
embodiment, the owner is the gas turbine engine original equipment manufacturer 
(OEM) and the subscriber is the engine owner, such as, a utility, independent power 
producer, or industrial facility. The engine may operate with proprietary data 
collection systems using proprietary algorithms. To protect the data, a method such 
as described herein may be employed, hi some known cases, the OEM and the engine 
owner enter into a technology sharing agreement wherein the owner is granted access 
rights to the data for the owner's own use. In such a case, the OEM may "turn on" the 
data for the owner's use. When the owner violates terms of the agreement the OEM 
may "turn off the data, such that the owner is no longer able to use the data. The 
OEM may "turn off the data by sending a command through segment 308 that alters 
configuration 310. The OEM may enter a command locally at processor 304 that 
ahers configuration 310, or configuration 310 may be altered automatically at the 
expiration of a predetermined time period. 

[0024] In the exemplary embodiment, segment 308 is a private 
intranet for communicating gas turbine control system tuning information between 
remote turbine sites and tuning engineers located at a home office or other remote 
turbine sites. In an alternative embodiment, segment 308 is the Internet. 

[0025] Figure 4 is a schematic illustration of an aUemate architecture 
of a network 400 that may be used with gas turbine system 10 shown in Figure 1. 
Components of network 400 that are identical to components of network 300 (shown 
in Figure 3) are identified in Figure 4 using the same reference numerals used in 
Figure 3. Accordingly, network 400 includes a first proprietary network segment 302, 
a supervisory processor 304 communicatively coupled to first proprietary network 
302, and a subscriber network segment 306 coupled to supervisory processor 304. hi 
an alternative embodiment, network 400 also includes a second proprietary data 
network segment 308 that is communicatively coupled to supervisory processor 304. 
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[0026] First proprietary network segment 302 may be configured to 
receive proprietary data communication from a proprietary data source, such as, but 
not limited to, gas turbine control system 402. In the exemplary embodiment, 
proprietary network segment 302 is an Ethernet segment. Data transmitted through 
segment 302 is obfuscated at gas turbine control system 402 by an obfuscator 404, 
such that an imauthorized user intercepting the data conununication would have 
difficulty extracting intelligible data from gas turbine control system 402 or segment 
302. Obfuscator 404 may be embodied in software executing within system 402 or 
may be a hardware or firmware implementation of a suitable obfuscation algorithm. 

[0027] Supervisory processor 304 is communicatively coupled to the 
first proprietary network and is configured to execute software instructions based on 
processor configuration 310. Configuration 310 may be embodied as a computer file 
that may reside in a memory 312 of processor 304. Memory 312 may, for example, 
be volatile, such as, a random access memory (RAM). In alternative embodiments, 
other forms of memory may be used, including but not limited, to flash memory 
(FLASH), programmable read only memory (PROM), and electronically erasable 
programmable read only memory (EEPROM). Configuration 310 may also be 
embodied as a processor register or other memory location of processor 304. 

[0028] Subscriber network segment 306 may be coupled to the 
supervisory processor through a processor or communications card port 314, and 
segment 306 is configured to transmit subscriber data from supervisory processor 304 
to a subscriber (not shown). 

[0029] In the exemplary embodiment, second proprietary data 
network segment 308 is a proprietary WAN, such as, a network with limited access 
points that is owned and operated by a single business entity or by a limited number 
of cooperative business entities.. 

[0030] In operation, processor 304 receives proprietary data from a 
data source such as control computer 402, and transmits the data to segment 308. 
Processor 304 also determines from configuration 310 whether to transmit the data to 
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subscriber segment 306. Processor may transmit the data to segment 306 by enabling 
port 314 to a transmit state, by deobfiiscating the data at port 314, and/or by routing 
the data to port 314. The transmission of data is selective to allow control of the data 
by the data owner to a subscriber of the data, hi the exemplary embodiment, the 
owner is the gas turbine engine original equipment manufacturer (OEM) and the 
subscriber is the engine owner, such as, a utility, independent power producer, or 
industrial facility. The engine may operate with proprietary data collection systems 
using proprietary algorithms. To protect the data, a method such as described herein 
may be employed, hi some known cases, the OEM and the engine owner enter into a 
technology sharing agreement wherein the owner is granted access rights to the data 
for the owner's own use. In such a case, the OEM may "turn on" the data for the 
owner's use. When the owner violates terms of the agreement the OEM may "turn 
off the data, such that the owner is no longer able to use the data. The OEM may 
"turn off the data by sending a command through segment 308 that alters 
configuration 310. The OEM may enter a command locally at processor 304 that 
alters configuration 310, or configuration 310 may be altered automatically at the 
expiration of a predetermined time period. 

[0031] In the exemplary embodiment, segment 308 is a private 
intranet for communicating gas turbine control system tuning information between 
remote turbine sites and tuning engineers located at a home office or other remote 
turbine sites. In an alternative embodiment, segment 308 is the Internet. 

[0032] Figure 5 is a block diagram of an exemplary method 500 that 
may be used to control data access to network 300 (shown in Figure 3) and network 
400 (shown in Figure 4). Method 500 includes receiving 502 a first stream of data at 
supervisory processor 304. The data may be obfuscated by gas turbine control system 
402, or may not be obfuscated by the data source, such as in one embodiment of 
computer 34. hi the exemplary embodiment, the data is transmitted using an Ethernet 
protocol, hi other embodiments, other data transmission protocols may be used. 
Transmission of the stream of data from the supervisory processor to the subscriber 
may be controlled 504 based on the supervisory processor configuration, for example, 
a subscriber may not have paid for access to the data, has allowed a subscription to 
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lapse, or has otherwise violated the terms of an agreement between the subscriber and 
the data owner, hi such a case as the subscriber desires access to the data and meets 
the terms of the agreement, processor 304 may receive 506 an enabling configuration 
that alters the supervisory processor configuration. Processor 304 recognizes the 
configuration instruction as enabling transmission of data received from segment 302 
to segment 306. When processor 304 receives further streams of data, processor 304 
will transmit 508 at least a portion of the further streams of data from supervisory 
processor 304 to the subscriber. 

[0033] The above-described methods and systems provide a cost- 
effective and reliable means for monitoring gas turbine operational parameters 
including combustion dynamics. More specifically, the methods and systems 
facilitate selectively transmitting gas turbine control system data from a gas turbine 
control system or a gas turbine monitoring system to a subscriber of the data. As a 
result, the methods and systems described herein facilitate monitoring and 
maintaining gas turbine engines in a cost-effective and reliable manner. 

[0034] Exemplary embodiments of gas turbine engine monitoring 
systems and communications systems are described above in detail. The systems are 
not limited to the specific embodiments described herein, but rather, components of 
each system may be utilized independently and separately from other components 
described herein. Each system component can also be used in combination with other 
system components. 

[0035] While the invention has been described in terms of various 
specific embodiments, those skilled in the art will recognize that the invention can be 
practiced with modification within the spirit and scope of the claims. 
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